AOH :: HP Unsorted S :: B06-1310.HTM

Smurfable linux kernel
Smurfable Linux Kernel
Smurfable Linux Kernel

Hi list,

A couple of months ago I pointed out to the Linux Kernel networking 
maintainers an oversight which caused the kernel to be vulnerable to 
some form of smurf attack.

The problem lay in the kernel's inability to ignore icmp timestamp 
broadcast requests, thus IP networks with Linux boxes on board could 
lend themselves to possible DoS attacks.

The problem was fixed straight away and is now missing from the 2.6.13 
branch. Described misbehavior can now be controlled via 
icmp_echo_ignore_broadcasts sysctl.

- Tomek

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2015 AOH
We do not send spam. If you have received spam bearing an email address, please forward it with full headers to